Recently I missed a package from Sagawa, and when I was signing up for an account to get redelivery, I saw this strange rule for the password requirements:
パスワードに「,（カンマ）」を使用することはできません。
Now, I've seen many websites that don't allow special characters (which is also extremely bad!), but specifically disallowing commas is something I've seen for the first time ever here. This makes me wonder if they're storing passwords in a plaintext database.
What's the biggest security failure you've come across?
by razorbeamz